Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/LiA5T0DdobqC9f_cWbvXng7zGac.roa
File: LiA5T0DdobqC9f_cWbvXng7zGac.roa (raw, json)
Hash identifier: KKGDnyt0EABcxHhS9g84ZS/kODko9udiDeUs3GYTRRU=
Subject key identifier: 2E:20:39:4F:40:DD:A1:BA:82:F5:FF:DC:59:BB:D7:9E:0E:F3:19:A7
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0195CC343BCA5F65D4D802B32BF29FF966A8
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/LiA5T0DdobqC9f_cWbvXng7zGac.roa
Signing time: Tue 25 Mar 2025 07:28:49 +0000
ROA not before: Tue 25 Mar 2025 07:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.168.202.0/24 maxlen: 24
207.244.208.0/24 maxlen: 24
207.244.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:34:3b:ca:5f:65:d4:d8:02:b3:2b:f2:9f:f9:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Mar 25 07:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e20394f40dda1ba82f5ffdc59bbd79e0ef319a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:fe:d5:3c:24:3c:64:4f:d0:b9:46:af:5e:
4e:0e:9e:71:90:61:71:5f:9b:ea:8a:de:15:c5:a6:
e4:09:15:5d:fb:b7:f5:1d:5d:51:4f:09:b9:6d:5d:
e6:27:24:06:16:a6:a5:dd:ba:c9:7a:c0:3a:a4:c7:
52:60:19:5a:dd:e7:57:41:54:5a:df:fe:be:ed:64:
dd:24:31:ba:8c:62:c3:6b:e5:63:48:fd:67:20:ca:
4d:28:4d:50:8e:d4:46:fd:15:ce:c0:75:80:6d:3a:
fc:56:d6:d2:9b:fa:65:10:f7:56:36:b5:ff:3d:80:
cb:e5:86:46:84:13:f8:b8:f6:1a:63:ad:36:48:ab:
32:d7:78:cc:70:5f:04:c8:c3:09:a9:b3:e8:2e:d1:
28:b0:0e:a5:2d:48:c1:aa:44:bf:d6:e4:0f:c3:ae:
d3:9d:2e:7c:5e:88:f2:dc:0c:d1:1c:20:e8:dc:87:
ab:0c:67:17:2e:3c:ce:95:bf:07:16:81:29:0d:3d:
26:18:b3:a3:cf:49:7d:df:e4:55:86:d2:a1:e0:3e:
34:7d:7e:0b:85:d7:a1:4b:19:27:8a:3a:7c:81:62:
81:eb:e1:60:21:68:52:10:28:47:f3:aa:f1:1b:57:
73:be:5d:01:ea:43:e8:26:d1:4e:94:0d:8d:e2:d9:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:39:4F:40:DD:A1:BA:82:F5:FF:DC:59:BB:D7:9E:0E:F3:19:A7
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/LiA5T0DdobqC9f_cWbvXng7zGac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.202.0/24
207.244.208.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c4:d6:4c:ec:8f:61:7b:f4:9a:12:c5:cc:d6:0f:d9:fc:2f:
77:7c:9d:c4:b5:fb:aa:9d:1d:fa:cb:31:ca:9f:97:6a:25:f1:
12:2f:86:59:b3:f3:79:d1:21:ca:10:d0:bd:9b:8c:c2:bf:85:
8e:bf:e8:b5:f5:5e:0b:75:19:53:78:2b:ce:93:4f:fb:80:4c:
29:a4:33:8a:10:2b:fa:62:e8:28:3f:f4:6d:66:e6:65:8f:1d:
a1:6e:e0:1a:4b:58:f4:31:34:96:42:87:c6:8a:28:95:34:1c:
49:ef:71:db:3a:54:53:2c:64:b6:db:01:20:17:18:b0:03:a6:
8a:c4:b4:a3:b5:32:f9:85:33:e5:c6:9d:ca:cf:bc:7d:e1:82:
62:62:53:c4:35:b7:14:d1:2f:c6:4f:7b:56:16:fa:eb:dc:c9:
74:1b:24:75:d3:ce:5d:19:78:48:a9:71:34:ee:2e:f4:26:c1:
bf:13:72:d1:1a:0f:c6:ff:18:cc:02:ed:7e:69:eb:ec:1c:29:
67:bc:b2:21:c0:37:38:04:84:82:43:15:15:dc:81:df:52:5c:
d8:ed:1a:cf:7a:71:35:7b:a9:ac:27:8f:77:e9:fb:b4:e6:8c:
b3:6c:53:4b:71:69:62:89:79:f2:4e:a2:34:ee:d8:da:41:a2:
d0:53:3c:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXMNDvKX2XU2AKzK/Kf+WaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwMzI1MDcyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTIwMzk0ZjQwZGRhMWJhODJmNWZmZGM1OWJiZDc5ZTBlZjMxOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvv+1TwkPGRP0LlGr15ODp5xkGFx
X5vqit4VxabkCRVd+7f1HV1RTwm5bV3mJyQGFqal3brJesA6pMdSYBla3edXQVRa
3/6+7WTdJDG6jGLDa+VjSP1nIMpNKE1QjtRG/RXOwHWAbTr8VtbSm/plEPdWNrX/
PYDL5YZGhBP4uPYaY602SKsy13jMcF8EyMMJqbPoLtEosA6lLUjBqkS/1uQPw67T
nS58Xojy3AzRHCDo3IerDGcXLjzOlb8HFoEpDT0mGLOjz0l93+RVhtKh4D40fX4L
hdehSxknijp8gWKB6+FgIWhSEChH86rxG1dzvl0B6kPoJtFOlA2N4tmICwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC4gOU9A3aG6gvX/3Fm7154O8xmnMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvTGlBNVQwRGRvYnFDOWZfY1didlhuZzd6R2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwajKAwQB
z/TQMA0GCSqGSIb3DQEBCwUAA4IBAQBXxNZM7I9he/SaEsXM1g/Z/C93fJ3Etfuq
nR36yzHKn5dqJfESL4ZZs/N50SHKENC9m4zCv4WOv+i19V4LdRlTeCvOk0/7gEwp
pDOKECv6YugoP/RtZuZljx2hbuAaS1j0MTSWQofGiiiVNBxJ73HbOlRTLGS22wEg
FxiwA6aKxLSjtTL5hTPlxp3Kz7x94YJiYlPENbcU0S/GT3tWFvrr3Ml0GyR1085d
GXhIqXE07i70JsG/E3LRGg/G/xjMAu1+aevsHClnvLIhwDc4BISCQxUV3IHfUlzY
7RrPenE1e6msJ4936fu05oyzbFNLcWliiXnyTqI07tjaQaLQUzww
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:54 2025 by rpki-client